Data Protection Officer

This position independently monitors compliance with the Data Protection Act (DPA), data protection standards, and best practices.

Data Protection Officer

Job Summary:

This position independently monitors compliance with the Data Protection Act (DPA), data protection standards, and best practices. Responsibilities include overseeing the development and continuous monitoring of the company’s data protection and privacy program to ensure adherence to regulatory requirements and industry standards.

What you will do?

• Monitor and ensure that each data controller processes personal data in compliance with the DPA and any other relevant privacy laws and regulations.
• Advise management on the allocation of internal responsibilities to support ongoing compliance with the DPA.
• Ensure that any violation of data protection standards or provisions of the Data Protection Act (DPA) by the data controller is addressed in compliance with the DPA.
• Contribute to the development, implementation and maintenance of data protection policies and procedures.
• Ensure that all documentation required to demonstrate compliance with the Data Protection Act (DPA), including policies, procedures, registration details, and data protection impact assessments, is regularly updated and maintained.
• Conduct or assist in data processing audits and privacy impact assessments, providing recommendations to enhance data protection practices as needed.
• Track the implementation of recommended actions.
• Prepare and present reports to Management
• Serve as the primary point of contact for the company and provide consultation on matters related to personal data processing.
• Establish mechanisms to receive and manage requests to exercise rights of the data subjects.
• Assist data subjects in the exercise of their rights under the DPA.
• Assess requests by data subjects in exercising their rights.
• Work collaboratively to maintain a data security incident management plan, ensuring prompt response to incidents, including security breaches, and implementing procedures for notifying the company and affected data subjects.
• Develop and implement a data protection and privacy training program tailored to employees' roles, ensuring awareness and compliance across all levels.
• Ensure data protection measures are embedded by design and by default, prioritizing the rights and freedoms of data subjects.
• Assess the hiring of data processors, including assessing the content of the contracts or legal documents that regulate the data controller – data processor relationship.
• Monitor changes to local data protection and privacy laws and make recommendations where necessary.
• Any other duties assigned. 

Qualifications & Experience

• Bachelor’s degree Computer Science, Risk Management, Audit or related field.
• Professional certification in data protection or privacy (e.g. CIPM, CIPP/E, CIPT, CDPSE, CDP).
• Minimum 3 years’ experience in data protection or privacy, law, information security, compliance, risk management, audit or a similar role.